It is also essential to reset all passwords and replace them with secure passwords. If you have used your WordPress password for other logins, you must also renew your login credentials there. Otherwise, you run the risk of your other accounts being hacked as well.
First, you should reset your WordPress admin password. You also need to change your SFTP password, database password, and password with your hosting provider. If ofother administrators also act on your WordPress page, they should change their passwords as soon as possible.